30 lines
1.3 KiB
PowerShell
30 lines
1.3 KiB
PowerShell
# Purpose: Install the GPO that disables Windows Defender
|
|
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Importing the GPO to disable Windows Defender..."
|
|
Import-GPO -BackupGpoName 'Disable Windows Defender' -Path "c:\vagrant\resources\GPO\disable_windows_defender" -TargetName 'Disable Windows Defender' -CreateIfNeeded
|
|
|
|
$OU = "ou=Workstations,dc=windomain,dc=local"
|
|
$gPLinks = $null
|
|
$gPLinks = Get-ADOrganizationalUnit -Identity $OU -Properties name,distinguishedName, gPLink, gPOptions
|
|
$GPO = Get-GPO -Name 'Disable Windows Defender'
|
|
If ($gPLinks.LinkedGroupPolicyObjects -notcontains $gpo.path)
|
|
{
|
|
New-GPLink -Name 'Disable Windows Defender' -Target $OU -Enforced yes
|
|
}
|
|
else
|
|
{
|
|
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Disable Windows Defender GPO was already linked at $OU. Moving On."
|
|
}
|
|
$OU = "ou=Servers,dc=windomain,dc=local"
|
|
$gPLinks = $null
|
|
$gPLinks = Get-ADOrganizationalUnit -Identity $OU -Properties name,distinguishedName, gPLink, gPOptions
|
|
$GPO = Get-GPO -Name 'Disable Windows Defender'
|
|
If ($gPLinks.LinkedGroupPolicyObjects -notcontains $gpo.path)
|
|
{
|
|
New-GPLink -Name 'Disable Windows Defender' -Target $OU -Enforced yes
|
|
}
|
|
else
|
|
{
|
|
Write-Host "$('[{0:HH:mm}]' -f (Get-Date)) Disable Windows Defender GPO was already linked at $OU. Moving On."
|
|
}
|
|
gpupdate /force
|